Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401D3B70545511F1A5C2BFABCE1D38B0.roa
File: 401D3B70545511F1A5C2BFABCE1D38B0.roa (raw, json)
Hash identifier: z5wVE/KqRSAN0FWBEzXf+wRSE5CzVrQN8dkKccN8puM=
Subject key identifier: 64:6C:62:38:88:B5:92:0B:57:39:66:81:0B:56:9E:E9:99:E2:D3:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401D3B70545511F1A5C2BFABCE1D38B0.roa
Signing time: Wed 20 May 2026 14:07:35 +0000
ROA not before: Wed 20 May 2026 14:07:30 +0000
ROA not after: Fri 26 Jun 2026 14:07:30 +0000
asID: 63139
IP address blocks: 154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117990 (0x1cce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 14:07:30 2026 GMT
Not After : Jun 26 14:07:30 2026 GMT
Subject: CN=6a0dc027-1d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:c8:93:94:aa:33:c8:75:ec:ce:ef:41:29:
15:c9:69:cc:cc:92:f4:dd:1c:d8:12:c0:06:d2:fd:
4a:d3:6d:0f:72:90:9e:74:d7:37:45:d1:41:b0:91:
ab:9b:64:dc:b1:5d:cf:cc:c0:25:6b:24:bf:ca:b8:
9d:59:45:82:a7:1d:34:17:ad:9f:76:51:b7:f4:4d:
86:61:49:c5:dc:ca:07:b5:c7:34:cc:59:d5:67:4c:
fe:89:da:4c:a2:9f:83:fd:03:6a:5e:31:34:07:3a:
e3:bd:c0:93:1b:74:47:e6:1c:2c:6d:b6:08:85:9c:
1d:17:89:7d:c8:51:7b:1a:e2:8e:90:63:13:a4:25:
de:40:a0:01:b7:c8:3a:dc:3e:d6:18:a4:3b:d9:d9:
d3:0f:79:ce:cd:e7:14:e4:95:2e:eb:8a:ba:6a:a5:
2c:6c:96:67:24:71:62:3c:81:45:6c:3a:96:a6:be:
24:1d:38:a9:66:9c:e7:b2:c7:54:6f:72:02:23:34:
e5:c9:a0:0d:65:fb:80:7e:a4:c2:89:99:f7:fb:a4:
be:bc:41:d9:24:7f:73:09:fa:72:37:a9:79:6a:33:
42:9e:9e:97:7c:86:b2:e5:73:21:f7:49:7f:d8:82:
71:23:6b:2c:a8:12:ff:a8:2a:ce:c4:67:d5:40:a3:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:62:38:88:B5:92:0B:57:39:66:81:0B:56:9E:E9:99:E2:D3:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401D3B70545511F1A5C2BFABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.112.0-154.94.121.255
Signature Algorithm: sha256WithRSAEncryption
5e:8d:33:d8:81:a1:26:96:97:22:b0:98:4a:fe:36:26:a1:ff:
fd:cf:b7:bf:68:ee:69:78:9f:1f:3b:2c:00:47:a7:26:b5:2e:
88:d9:6d:a4:5b:2c:a6:e5:bc:4f:3d:8b:06:f1:79:31:5f:33:
c3:6f:f8:d3:57:e1:24:09:37:22:23:20:e1:2a:ff:19:05:a2:
65:70:dd:ff:78:b8:e6:81:3e:e1:43:49:2b:56:f3:a7:18:75:
15:0a:42:fc:fd:3a:9e:7c:a8:b6:6b:0c:0f:a3:65:c0:61:d3:
e5:f6:2a:92:be:f7:16:b2:96:1f:5d:94:83:ac:44:c2:b3:28:
d2:ee:2c:bb:4c:b2:f0:f2:28:10:cd:b1:ca:c7:62:ae:48:f5:
ac:07:c3:82:03:22:1c:c0:f3:8f:60:45:7e:e6:93:85:20:65:
67:b2:8a:8a:4d:21:78:4e:76:fa:01:cd:38:81:62:b2:60:a2:
29:1a:cb:99:a4:da:28:07:92:99:82:eb:e7:9e:67:39:30:d4:
38:11:46:c1:39:ab:e6:1a:ef:84:89:b6:fc:bd:20:1a:e8:fa:
85:ca:ff:bc:53:e2:47:19:39:45:98:d2:83:34:6b:00:25:73:
3f:64:82:e6:5c:66:ad:9d:02:4f:98:86:c0:0a:a0:13:31:0c:
8d:c7:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:56 2026 by rpki-client